I generally do my browsing over an ssh tunnel to somewhere not on a
wireless net, for all the obvious reasons. In the past, I've run a

squid proxy on a well-located machine, and ssh'd to it, forwarding
port

3128 (or whatever) from my laptop to that proxy. In the interest of
reducing the number of moving parts I have to maintain, I tried using
ssh's built-in SOCKS proxy (the DynamicForward option in the config

file) instead. That works well for most web sites, but if the web
site
has a AAAA record -- and that includes www.netbsd.org -- the
connection